Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 09:54:05.669 00:06:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 09:54:05.665 00:06:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 09:58:59.997 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60952 10 6452 1 2025-08-03 09:59:17.538 00:00:10.364 TCP 23.104.0.1:54954 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:00:00.220 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45116 10 6452 1 2025-08-03 10:00:17.942 00:00:10.374 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:01:00.389 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44886 10 6452 1 2025-08-03 10:01:18.356 00:00:10.376 TCP 23.104.0.1:34282 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:02:00.610 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33274 10 6452 1 2025-08-03 10:02:18.777 00:00:10.326 TCP 23.104.0.1:58260 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:02:38.419 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:02:38.366 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:03:00.822 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41370 10 6452 1 2025-08-03 10:03:19.142 00:00:10.370 TCP 23.104.0.1:34594 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:04:01.066 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60516 10 6452 1 2025-08-03 10:04:19.543 00:00:10.367 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:05:01.288 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58042 10 6452 1 2025-08-03 10:05:19.945 00:00:10.370 TCP 23.104.0.1:52446 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:01:05.676 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 10:01:05.673 00:06:00.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 10:06:01.515 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54828 10 6452 1 2025-08-03 10:06:20.350 00:00:10.370 TCP 23.104.0.1:60522 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:07:01.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41272 10 6452 1 2025-08-03 10:07:20.756 00:00:10.387 TCP 23.104.0.1:41484 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:07:38.408 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:07:38.245 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:08:01.950 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:53262 10 6452 1 2025-08-03 10:08:21.184 00:00:10.440 TCP 23.104.0.1:60440 -> 1.101.0.1:3000 15 1926 1 2025-08-03 10:09:02.147 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:38598 12 10367 1 2025-08-03 10:09:21.661 00:00:10.316 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:10:02.394 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53642 10 6452 1 2025-08-03 10:10:22.019 00:00:10.372 TCP 23.104.0.1:40694 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:11:02.566 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53396 10 6452 1 2025-08-03 10:11:22.420 00:00:10.374 TCP 23.104.0.1:43082 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:12:02.735 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58136 10 6452 1 2025-08-03 10:12:22.834 00:00:10.386 TCP 23.104.0.1:50064 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:12:38.401 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:12:38.254 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:08:05.678 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 10:08:05.676 00:06:00.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 10:13:02.944 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:41348 10 6452 1 2025-08-03 10:13:23.258 00:00:10.372 TCP 23.104.0.1:45200 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:14:03.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2025-08-03 10:14:23.676 00:00:10.378 TCP 23.104.0.1:50458 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:15:03.387 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58448 10 6452 1 2025-08-03 10:15:24.108 00:00:10.366 TCP 23.104.0.1:37402 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:16:03.608 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44420 10 6452 1 2025-08-03 10:16:24.520 00:00:10.371 TCP 23.104.0.1:54350 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:17:03.826 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43034 10 6452 1 2025-08-03 10:17:24.925 00:00:10.386 TCP 23.104.0.1:56786 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:17:38.596 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:17:38.542 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:18:04.078 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58606 10 6452 1 2025-08-03 10:18:25.354 00:00:10.362 TCP 23.104.0.1:49958 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:19:04.290 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40424 10 6452 1 2025-08-03 10:19:25.757 00:00:10.384 TCP 23.104.0.1:44924 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:15:05.679 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 10:15:05.677 00:06:00.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 10:20:04.513 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58858 10 6452 1 2025-08-03 10:20:26.180 00:00:10.366 TCP 23.104.0.1:56886 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:21:04.735 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45450 10 6452 1 2025-08-03 10:21:26.584 00:00:10.362 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:22:04.963 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43662 12 6556 1 2025-08-03 10:22:38.705 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:22:38.512 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:22:26.983 00:00:10.370 TCP 23.104.0.1:36994 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:23:05.201 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36098 10 6452 1 2025-08-03 10:23:27.393 00:00:10.364 TCP 23.104.0.1:51616 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:24:05.418 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40788 10 6452 1 2025-08-03 10:24:27.797 00:00:10.363 TCP 23.104.0.1:52016 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:25:05.588 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47150 10 6452 1 2025-08-03 10:25:28.199 00:00:10.325 TCP 23.104.0.1:34112 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:26:05.796 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:38100 10 6452 1 2025-08-03 10:26:28.569 00:00:10.370 TCP 23.104.0.1:40398 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:22:05.686 00:06:00.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 10:22:05.689 00:06:00.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 10:27:05.989 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:57156 10 6452 1 2025-08-03 10:27:38.577 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:27:38.849 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:27:28.984 00:00:10.377 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:28:06.191 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41328 10 6452 1 2025-08-03 10:28:29.404 00:00:10.437 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 15 1926 1 2025-08-03 10:29:06.364 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:59408 12 10367 1 2025-08-03 10:29:29.886 00:00:10.363 TCP 23.104.0.1:42704 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:30:06.615 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55152 10 6452 1 2025-08-03 10:30:30.286 00:00:10.367 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:31:06.781 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-08-03 10:31:30.693 00:00:10.361 TCP 23.104.0.1:48900 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:32:06.952 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53768 12 6556 1 2025-08-03 10:32:38.765 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:32:31.105 00:00:10.360 TCP 23.104.0.1:41638 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:32:38.880 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:33:07.190 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44054 10 6452 1 2025-08-03 10:33:31.506 00:00:10.367 TCP 23.104.0.1:36720 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:29:05.686 00:06:00.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 10:29:05.690 00:06:00.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 10:34:07.432 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53798 10 6452 1 2025-08-03 10:34:31.915 00:00:10.361 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:35:07.646 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 2025-08-03 10:35:32.320 00:00:10.364 TCP 23.104.0.1:42812 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:36:07.865 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43638 10 6452 1 2025-08-03 10:36:32.726 00:00:10.424 TCP 23.104.0.1:53414 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:37:08.095 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39466 10 6452 1 2025-08-03 10:37:38.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:37:38.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:37:33.191 00:00:10.363 TCP 23.104.0.1:48422 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:38:08.307 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37326 10 6452 1 2025-08-03 10:38:33.597 00:00:10.364 TCP 23.104.0.1:54444 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:39:08.517 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34484 10 6452 1 2025-08-03 10:39:34.005 00:00:10.373 TCP 23.104.0.1:46354 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:40:08.736 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40012 10 6452 1 2025-08-03 10:40:34.413 00:00:10.324 TCP 23.104.0.1:35938 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:36:05.688 00:06:00.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 10:36:05.690 00:06:00.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 10:41:08.906 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45544 10 6452 1 2025-08-03 10:41:34.774 00:00:10.367 TCP 23.104.0.1:48112 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:42:09.120 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46746 10 6452 1 2025-08-03 10:42:38.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:42:38.946 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:42:35.183 00:00:10.321 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:43:09.332 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46108 10 6452 1 2025-08-03 10:43:35.545 00:00:10.323 TCP 23.104.0.1:37100 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:44:09.553 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35412 10 6452 1 2025-08-03 10:44:35.910 00:00:10.367 TCP 23.104.0.1:41552 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:45:09.766 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43842 10 6452 1 2025-08-03 10:45:36.315 00:00:10.364 TCP 23.104.0.1:42556 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:46:09.941 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38704 10 6452 1 2025-08-03 10:46:36.721 00:00:10.376 TCP 23.104.0.1:36114 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:47:10.180 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52208 10 6452 1 2025-08-03 10:47:39.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:47:39.056 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:47:37.139 00:00:10.328 TCP 23.104.0.1:50722 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:43:05.692 00:06:00.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 10:43:05.690 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 10:48:10.351 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46182 10 6452 1 2025-08-03 10:48:37.514 00:00:10.367 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:49:10.585 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40780 10 6452 1 2025-08-03 10:49:37.918 00:00:10.338 TCP 23.104.0.1:57744 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:50:10.799 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6452 1 2025-08-03 10:50:38.291 00:00:10.360 TCP 23.104.0.1:57762 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:51:11.026 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39884 10 6452 1 2025-08-03 10:51:38.694 00:00:10.378 TCP 23.104.0.1:48274 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:52:11.241 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55390 10 6452 1 2025-08-03 10:52:39.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:52:39.249 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:52:39.102 00:00:10.363 TCP 23.104.0.1:33764 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:53:11.448 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36342 10 6452 1 2025-08-03 10:53:39.506 00:00:10.367 TCP 23.104.0.1:51030 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:54:11.661 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37494 10 6452 1 2025-08-03 10:54:39.906 00:00:10.363 TCP 23.104.0.1:52094 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:50:05.692 00:06:00.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 10:50:05.690 00:06:00.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 10:55:11.836 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48420 10 6452 1 2025-08-03 10:55:40.311 00:00:10.369 TCP 23.104.0.1:44724 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:56:12.010 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53490 10 6452 1 2025-08-03 10:56:40.714 00:00:10.390 TCP 23.104.0.1:38090 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:57:12.225 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52140 10 6452 1 2025-08-03 10:57:39.318 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 10:57:39.027 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 10:57:41.141 00:00:10.380 TCP 23.104.0.1:57124 -> 1.101.0.1:3000 11 1507 1 2025-08-03 10:58:12.440 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38102 10 6452 1 2025-08-03 10:58:41.566 00:00:10.406 TCP 23.104.0.1:34570 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 162, total bytes: 508381, total packets: 1604, avg bps: 1046, avg pps: 0, avg bpp: 316 Time window: 2025-08-03 09:54:05 - 2025-08-03 10:58:51 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0011s User: 0.0034s Wall: 0.0023s flows/second: 70463.3 Runtime: 0.0023s